Product Security Engineer / Architect - Email Security//Fulltime

Client is seeking a Product Security Engineer / Architect Email Security to join the Defensive Engineering team within Global Cyber Security (GCS). The role will lead the strategy, architecture, engineering, and continuous improvement of enterprise email security capabilities, protecting the organization against phishing, Business Email Compromise (BEC), account takeover, malware, social engineering, and emerging email-based threats. Key Responsibilities

• Define and drive the enterprise email security strategy, architecture, and roadmap.
• Lead evaluation, implementation, and improvement of enterprise email security technologies.
• Partner with the GTS Email Platform team to design and deploy security capabilities across the email ecosystem.
• Collaborate with the Cyber Defense Center (CDC) on detection, investigation, and response for phishing, BEC, account takeover, and other email threats.
• Work with Threat Intelligence, Identity Security, and Incident Response teams to identify emerging threats and strengthen defensive controls.
• Lead product evaluations, POCs, and vendor assessments for email security technologies.
• Integrate email security solutions with SIEM, SOAR, identity, endpoint, and threat intelligence platforms.
• Develop security standards, architectural patterns, and implementation guidance.
• Track email threat protection, phishing resilience, and risk-reduction metrics.
• Serve as a Subject Matter Expert (SME) for enterprise email security initiatives.

Required Technical Skills

• Enterprise email security platforms such as:

• Microsoft Defender for Office 365
• Proofpoint
• Abnormal Security
• Mimecast
• Cisco Secure Email
• Similar enterprise email security solutions

• Strong understanding of:

• Phishing
• Business Email Compromise (BEC)
• Account Takeover
• Malware
• Social Engineering
• Email-based threats
• Strong knowledge of

• SMTP security
• Email authentication frameworks
• Experience designing and implementing enterprise-scale email security controls and architectures.

• Experience integrating email security platforms with:

• SIEM
• SOAR
• Identity platforms
• Endpoint security
• Threat Intelligence solutions
• Strong automation, scripting, analytical, and problem-solving skills.
• Excellent communication and stakeholder-management skills., * 8+ years of experience in cybersecurity, security engineering, or security architecture.
• 5+ years of hands-on experience with email security technologies and threat protection solutions.
• Experience developing security strategies, roadmaps, and architecture standards.
• Ability to translate cybersecurity risks into actionable technical solutions.
• Experience working across Cybersecurity, GTS, and Engineering organizations., * Bachelor’s degree in Computer Science, Information Security, Engineering, or related technical discipline, or equivalent practical experience.
• Financial services or other regulated-industry experience.
• Experience with emerging AI-driven phishing, impersonation, and social-engineering threats.

• Certifications such as:

• CISSP
• CCSP
• GIAC
• Microsoft Security certifications

Rockefeller Capital Management

• Hamilton, NJ
• $175,000 per year About Rockefeller Capital Management: Rockefeller Capital Management was established in 2018 as a leading independent financial advisory services firm. Originally founded in 1882…